CVE-2015-5722
Fixed in a distro release EPSS 35%
buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) by creating a zone containing a malformed DNSSEC key and issuing a query for a name in that zone.
Products: isc bind, apple mac_os_x_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | bind9 | 1:9.9.5.dfsg-12 |
| Debian 13 | bind9 | 1:9.9.5.dfsg-12 |
| Debian 14 | bind9 | 1:9.9.5.dfsg-12 |
| Debian 6.0 | bind9 | 1:9.7.3.dfsg-1~squeeze17 |
| Debian 7 | bind9 | 1:9.8.4.dfsg.P1-6+nmu2+deb7u7 |
| Debian 8 | bind9 | 1:9.9.5.dfsg-9+deb8u3 |
| Red Hat Enterprise Linux 5 | bind | 30:9.3.6-25.P1.el5_11.4 |
| Red Hat Enterprise Linux 5 | bind-chroot | 30:9.3.6-25.P1.el5_11.4 |
| Red Hat Enterprise Linux 5 | bind-debuginfo | 30:9.3.6-25.P1.el5_11.4 |
| Red Hat Enterprise Linux 5 | bind-devel | 30:9.3.6-25.P1.el5_11.4 |
| Red Hat Enterprise Linux 5 | bind-libbind-devel | 30:9.3.6-25.P1.el5_11.4 |
| Red Hat Enterprise Linux 5 | bind-libs | 30:9.3.6-25.P1.el5_11.4 |
| Red Hat Enterprise Linux 5 | bind-sdb | 30:9.3.6-25.P1.el5_11.4 |
| Red Hat Enterprise Linux 5 | bind-utils | 30:9.3.6-25.P1.el5_11.4 |
| Red Hat Enterprise Linux 5 | bind97 | 32:9.7.0-21.P2.el5_11.3 |
| Red Hat Enterprise Linux 5 | bind97-chroot | 32:9.7.0-21.P2.el5_11.3 |
| Red Hat Enterprise Linux 5 | bind97-debuginfo | 32:9.7.0-21.P2.el5_11.3 |
| Red Hat Enterprise Linux 5 | bind97-devel | 32:9.7.0-21.P2.el5_11.3 |
| Red Hat Enterprise Linux 5 | bind97-libs | 32:9.7.0-21.P2.el5_11.3 |
| Red Hat Enterprise Linux 5 | bind97-utils | 32:9.7.0-21.P2.el5_11.3 |
| Red Hat Enterprise Linux 5 | caching-nameserver | 30:9.3.6-25.P1.el5_11.4 |
| Red Hat Enterprise Linux 6 | bind | 32:9.8.2-0.37.rc1.el6_7.4 |
| Red Hat Enterprise Linux 6 | bind-chroot | 32:9.8.2-0.37.rc1.el6_7.4 |
| Red Hat Enterprise Linux 6 | bind-debuginfo | 32:9.8.2-0.37.rc1.el6_7.4 |
| Red Hat Enterprise Linux 6 | bind-devel | 32:9.8.2-0.37.rc1.el6_7.4 |
| Red Hat Enterprise Linux 6 | bind-libs | 32:9.8.2-0.37.rc1.el6_7.4 |
| Red Hat Enterprise Linux 6 | bind-sdb | 32:9.8.2-0.37.rc1.el6_7.4 |
| Red Hat Enterprise Linux 6 | bind-utils | 32:9.8.2-0.37.rc1.el6_7.4 |
| Red Hat Enterprise Linux 7 | bind | 32:9.9.4-18.el7_1.5 |
| Red Hat Enterprise Linux 7 | bind | 32:9.9.4-18.ael7b_1.5 |
| Red Hat Enterprise Linux 7 | bind-chroot | 32:9.9.4-18.el7_1.5 |
| Red Hat Enterprise Linux 7 | bind-chroot | 32:9.9.4-18.ael7b_1.5 |
| Red Hat Enterprise Linux 7 | bind-debuginfo | 32:9.9.4-18.ael7b_1.5 |
| Red Hat Enterprise Linux 7 | bind-debuginfo | 32:9.9.4-18.el7_1.5 |
| Red Hat Enterprise Linux 7 | bind-devel | 32:9.9.4-18.ael7b_1.5 |
| Red Hat Enterprise Linux 7 | bind-devel | 32:9.9.4-18.el7_1.5 |
| Red Hat Enterprise Linux 7 | bind-libs | 32:9.9.4-18.ael7b_1.5 |
| Red Hat Enterprise Linux 7 | bind-libs | 32:9.9.4-18.el7_1.5 |
| Red Hat Enterprise Linux 7 | bind-libs-lite | 32:9.9.4-18.ael7b_1.5 |
| Red Hat Enterprise Linux 7 | bind-libs-lite | 32:9.9.4-18.el7_1.5 |
| Red Hat Enterprise Linux 7 | bind-license | 32:9.9.4-18.ael7b_1.5 |
| Red Hat Enterprise Linux 7 | bind-license | 32:9.9.4-18.el7_1.5 |
| Red Hat Enterprise Linux 7 | bind-lite-devel | 32:9.9.4-18.el7_1.5 |
| Red Hat Enterprise Linux 7 | bind-lite-devel | 32:9.9.4-18.ael7b_1.5 |
| Red Hat Enterprise Linux 7 | bind-sdb | 32:9.9.4-18.ael7b_1.5 |
| Red Hat Enterprise Linux 7 | bind-sdb | 32:9.9.4-18.el7_1.5 |
| Red Hat Enterprise Linux 7 | bind-sdb-chroot | 32:9.9.4-18.el7_1.5 |
| Red Hat Enterprise Linux 7 | bind-sdb-chroot | 32:9.9.4-18.ael7b_1.5 |
| Red Hat Enterprise Linux 7 | bind-utils | 32:9.9.4-18.ael7b_1.5 |
| Red Hat Enterprise Linux 7 | bind-utils | 32:9.9.4-18.el7_1.5 |
| Red Hat rhel aus 6.4 | bind | 32:9.8.2-0.17.rc1.el6_4.7 |
| Red Hat rhel aus 6.4 | bind-chroot | 32:9.8.2-0.17.rc1.el6_4.7 |
| Red Hat rhel aus 6.4 | bind-debuginfo | 32:9.8.2-0.17.rc1.el6_4.7 |
| Red Hat rhel aus 6.4 | bind-devel | 32:9.8.2-0.17.rc1.el6_4.7 |
| Red Hat rhel aus 6.4 | bind-libs | 32:9.8.2-0.17.rc1.el6_4.7 |
| Red Hat rhel aus 6.4 | bind-sdb | 32:9.8.2-0.17.rc1.el6_4.7 |
| Red Hat rhel aus 6.4 | bind-utils | 32:9.8.2-0.17.rc1.el6_4.7 |
| Red Hat rhel aus 6.5 | bind | 32:9.8.2-0.23.rc1.el6_5.2 |
| Red Hat rhel aus 6.5 | bind-chroot | 32:9.8.2-0.23.rc1.el6_5.2 |
| Red Hat rhel aus 6.5 | bind-debuginfo | 32:9.8.2-0.23.rc1.el6_5.2 |
| Red Hat rhel aus 6.5 | bind-devel | 32:9.8.2-0.23.rc1.el6_5.2 |
| Red Hat rhel aus 6.5 | bind-libs | 32:9.8.2-0.23.rc1.el6_5.2 |
| Red Hat rhel aus 6.5 | bind-sdb | 32:9.8.2-0.23.rc1.el6_5.2 |
| Red Hat rhel aus 6.5 | bind-utils | 32:9.8.2-0.23.rc1.el6_5.2 |
| Red Hat rhel eus 6.6 | bind | 32:9.8.2-0.30.rc1.el6_6.4 |
| Red Hat rhel eus 6.6 | bind-chroot | 32:9.8.2-0.30.rc1.el6_6.4 |
| Red Hat rhel eus 6.6 | bind-debuginfo | 32:9.8.2-0.30.rc1.el6_6.4 |
| Red Hat rhel eus 6.6 | bind-devel | 32:9.8.2-0.30.rc1.el6_6.4 |
| Red Hat rhel eus 6.6 | bind-libs | 32:9.8.2-0.30.rc1.el6_6.4 |
| Red Hat rhel eus 6.6 | bind-sdb | 32:9.8.2-0.30.rc1.el6_6.4 |
| Red Hat rhel eus 6.6 | bind-utils | 32:9.8.2-0.30.rc1.el6_6.4 |
| SUSE Linux Enterprise Desktop 11 SP3 | bind | 9.9.6P1-0.15.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | bind | 9.9.6P1-0.15.1 |
| SUSE Linux Enterprise Desktop 12 | bind | 9.9.6P1-26.1 |
| SUSE Linux Enterprise Server 11 SP1-LTSS | bind | 9.6ESVR11W1-0.9.1 |
| SUSE Linux Enterprise Server 11 SP1-TERADATA | bind | 9.6ESVR11W1-0.9.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | bind | 9.9.6P1-0.15.1 |
| SUSE Linux Enterprise Server 11 SP3 | bind | 9.9.6P1-0.15.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | bind | 9.9.6P1-0.15.1 |
| SUSE Linux Enterprise Server 11 SP4 | bind | 9.9.6P1-0.15.1 |
| SUSE Linux Enterprise Server 12 | bind | 9.9.6P1-26.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | bind | 9.9.6P1-0.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | bind | 9.9.6P1-0.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | bind | 9.9.6P1-26.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP3 | bind | 9.9.6P1-0.15.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | bind | 9.9.6P1-0.15.1 |
| SUSE Linux Enterprise Software Development Kit 12 | bind | 9.9.6P1-26.1 |
| Ubuntu 14.04 LTS | bind9 | 1:9.9.5.dfsg-3ubuntu0.5 |
| openSUSE Tumbleweed | bind | 9.10.3P4-21.1 |